Why can't I get started with Container Registry?

You're trying to use the getting started instructions for IBM Cloud® Container Registry, but you can't get any Container Registry commands to work.

You can't run any commands in Container Registry because you don't have permission.

The getting started instructions assume that you’re in your own account with permission to do everything. If you’re a member of an account that is owned and administered by someone else, you might not have the correct permissions to configure and operate the registry service.

Ask your administrator to add you to an existing access policy, or create an access policy that gives you the correct service access role for working with Container Registry. For more information, see Managing IAM access for Container Registry and Defining IAM access policies for Container Registry.

If you send the following text to your administrator, it might help them to set up the correct IAM service access role permissions. Replace <account_name> with the name of the account that you want to access.

I need to have the Manager service access role on container-registry in the account <account_name> so that I can manage the IBM Cloud Container Registry service. (You might need to justify this request in more detail by specifying the actions that you require regarding service access roles). You can grant me the Manager role with the ibmcloud iam user-policy-create $MYUSER --roles Manager --service-name container-registry command, but you can also use other indirect ways to grant permissions consistently, for example by using access groups and templates, according to the account policy. For more information about assigning access, see Assigning access to Container Registry in the console.